initial commit

internal/middleware/auth.go

@@ -0,0 +1,57 @@
+package middleware
+
+import (
+	"strings"
+
+	"github.com/hafizhproject45/Golang-Boilerplate.git/internal/config"
+	service "github.com/hafizhproject45/Golang-Boilerplate.git/internal/modules/users/services"
+	"github.com/hafizhproject45/Golang-Boilerplate.git/internal/utils"
+
+	"github.com/gofiber/fiber/v2"
+)
+
+func Auth(userService service.UserService, requiredRights ...string) fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		authHeader := c.Get("Authorization")
+		token := strings.TrimSpace(strings.TrimPrefix(authHeader, "Bearer "))
+
+		if token == "" {
+			return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")
+		}
+
+		userID, err := utils.VerifyToken(token, config.JWTSecret, config.TokenTypeAccess)
+		if err != nil {
+			return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")
+		}
+
+		user, err := userService.GetOne(c, userID)
+		if err != nil || user == nil {
+			return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")
+		}
+
+		c.Locals("user", user)
+
+		// if len(requiredRights) > 0 {
+		// 	userRights, hasRights := config.RoleRights[user.Role]
+		// 	if (!hasRights || !hasAllRights(userRights, requiredRights)) && c.Params("userId") != userID {
+		// 		return fiber.NewError(fiber.StatusForbidden, "You don't have permission to access this resource")
+		// 	}
+		// }
+
+		return c.Next()
+	}
+}
+
+// func hasAllRights(userRights, requiredRights []string) bool {
+// 	rightSet := make(map[string]struct{}, len(userRights))
+// 	for _, right := range userRights {
+// 		rightSet[right] = struct{}{}
+// 	}
+
+// 	for _, right := range requiredRights {
+// 		if _, exists := rightSet[right]; !exists {
+// 			return false
+// 		}
+// 	}
+// 	return true
+// }